cnssl.gccdn.cn

- Tongxing Wan Dian (Beijing) Technology Co., Ltd. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 07:ea:04:7c:33:a5:dc:a8:06:55:1c:46:16:be:de:df was issued on by DigiCert Inc.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tongxing Wan Dian (Beijing) Technology Co., Ltd.

Organization: Tongxing Wan Dian (Beijing) Technology Co., Ltd.
Locality: Beijing
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ea:04:7c:33:a5:dc:a8:06:55:1c:46:16:be:de:df
Serial Number (int): 10519684405306377432122892999999807199
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:2a:b1:eb:28:c0:9d:36:cb:92:67:87:a3:cd:c9:0a:af:93:2e:bf
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 91:1e:77:a4:b8:e1:83:c9:fb:9f:84:8e:23:0b:25:27:3b:90:48:62
Fingerprint (sha256): 0f:82:19:6a:ec:46:38:0a:7b:c5:4a:7a:f6:ba:82:13:70:00:8b:5c:ae:f8:18:eb:ee:5f:62:51:53:dc:c1:43

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate cnssl.gccdn.cn

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cnssl.gccdn.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cnssl.gccdn.cn
lgstudio.lg.com.cn
openapi.txnetworks.cn
ocsp.txnetworks.cn
inidc-ocsp.txnetworks.cn
idccun-ocsp.txnetworks.cn
wellidc-ocsp.txnetworks.cn
www.innisfree.cn
jcmdc-ocsp.txnetworks.cn
m.innisfree.cn
cmidc-ocsp.txnetworks.cn
www.nikkorclub.com.cn
www.lifevc.com
c1.lifevccdn.com
i1.lifevccdn.com
control-beta.txnetworks.cn
idccun-control-beta.txnetworks.cn
wellidc-control-beta.txnetworks.cn
inidc-control-beta.txnetworks.cn
jcmdc-control-beta.txnetworks.cn
cmidc-control-beta.txnetworks.cn
www.etude.cn
m.etude.cn
openapi-beta.txnetworks.cn
cc-baitu.ddcdn.com
cc.ddcdn.com
cc1.ddcdn.com
ccm.ddcdn.com
ccma.ddcdn.com
ccmb.ddcdn.com
ccmc.ddcdn.com
ccmd.ddcdn.com
ccmx.ddcdn.com
ccx.ddcdn.com
reg.nikon.com.cn
myenjoynps.nikon.com.cn
enjoynikon.nikon.com.cn
secure.pepperstone.com
cn.pepperstone.com
www.nics-training.net
d-track.send.microad-cn.com
c.lifevccdn.com
i.lifevccdn.com
static.koudai.com
secure.cn.pepperstone.com
static.qiniucdn.com
cdn1.lncld.net
ccm-baitu.ddcdn.com
admin.cn.pepperstone.com
admin-cn.pepperstone.com
static.weidian.com
www.world-we-made.com
static10.elemecdn.com
static11.elemecdn.com
fuss10.elemecdn.com
fuss11.elemecdn.com
cdn.ricequant.com
ccm-mb.ddcdn.com
image1.abaolicai.com
plugin.bang5mai.com
djicdn.com
asset1.djicdn.com
www.lg.com.cn
static.trthi.com
cn.go-wellness.epson.com
cn.api.sensing.epsonconnect.com
cn.strategyanalytics.com
tradercc.iforex.com
traderstaticcc.iforex.com
cool.lynx.cn
www.newlook.cn
jordan.nike.com.cn
unlimited.nike.com.cn
stg-s01.epson.biz
stg1-auth.cp.epson.com
exploration.lipton.com.cn
johnny-allcn.cnssl.gccdn.cn
johnny-fifteencn.cnssl.gccdn.cn
johnny-tencn.cnssl.gccdn.cn
unileverfoodsolutions.com.cn
ikacampaign.unileverfoodsolutions.com.cn
*.sslcs.txnetworks.cn
sample.lipton.cn
cdn.tagcommander.com
runclub.nike.com.cn
*.unileverfoodsolutions.com.cn
*.dove.com.cn
www.nikon.com.cn
estore-cn.pandora.net
*.nike.com.cn
*.ihaveu.net
*.ihaveu.com
*.i.hecdn.com
*.lux.com.cn
m.lifevc.com
*.pic.12306pc.cn
*.lifevc.com
*.dxpmedia.com
*.pc.lux.com.cn
*.safetree.com.cn
*.wshtgame.com
*.upliveapp.com
*.cbern.com.cn
*.lynx.cn
*.lifebuoy.com.cn
*.smallactions.cn
*.magnum.cn
*.ulcampaign.com
*.cdn.pengpengla.com

Other certificates including the domain name gccdn.cn

(limited to 100 certificates)
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
support.cdnetworks.net
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
support.cdnetworks.net
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn
cnssl.gccdn.cn

Certificate

The complete raw certificate details for cnssl.gccdn.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn8zLBzGLHfe5CJ9Q78B
l6ogAuE51TP5trZu1O/VHN/2jxdM2tsc47gBLp5dTIhhY/2SlhvLrLIYQCVQG1lI
l+2dNHDItzh7WR40MPg2KqvC90lxEYZ2Ap6hkH/IoFZZmGt10lbAjvRfl75M5Qrf
xRxT2vle5SWwvIXWteIlgNOrlHQL05edvYdcHX+pc1LYmN2AJgmtUSzGjpRVBqjq
1YbkInD+RgY03mJGu0J98ef4BO8WfCgLJXj13z7oSs1uFzUeOkEh7dTv4jGRGlan
Wkn1o9n4yanfNunPgKcg/b0WRnZ+ZhML2x35K/icdWF+26TtbzpSH9B92Mvqd9mV
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10519684405306377432122892999999807199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tongxing Wan Dian (Beijing) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cnssl.gccdn.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22028189668544340529526683863380210758030514449620990993836502716471467070978147222570421770226837556461619003446663668115123714648809874897920119812472770663972156689747404016810868152727221799656623184766862326030405251746139291069354491087786035716007328209821598096728035778383629079355585908169516347115203918655164907712059835812582307785183524481588895338313694331355707185091236209416639243104101965454584063204254958184847690129405086214134982160391653535279503193846666200123951812618773922263035044624713978257877925501119777098396667721374603213611672015477802135738836257619463637139759534228172862756339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b52ab1eb28c09d36cb926787a3cdc90aaf932ebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgstudio.lg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openapi.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inidc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idccun-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellidc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innisfree.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcmdc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.innisfree.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmidc-ocsp.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikkorclub.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c1.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i1.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idccun-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellidc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inidc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcmdc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmidc-control-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etude.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.etude.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openapi-beta.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc-baitu.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc1.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccma.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmb.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmc.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmd.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmx.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccx.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myenjoynps.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enjoynikon.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nics-training.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-track.send.microad-cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.lifevccdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.koudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qiniucdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.lncld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm-baitu.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-cn.pepperstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.weidian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world-we-made.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static10.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static11.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuss10.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuss11.elemecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ricequant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccm-mb.ddcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image1.abaolicai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plugin.bang5mai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset1.djicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.trthi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.go-wellness.epson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.api.sensing.epsonconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.strategyanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradercc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traderstaticcc.iforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cool.lynx.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlook.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlimited.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-s01.epson.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1-auth.cp.epson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploration.lipton.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnny-allcn.cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnny-fifteencn.cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnny-tencn.cnssl.gccdn.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unileverfoodsolutions.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikacampaign.unileverfoodsolutions.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sslcs.txnetworks.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sample.lipton.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tagcommander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runclub.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unileverfoodsolutions.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dove.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nikon.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estore-cn.pandora.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nike.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihaveu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihaveu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.hecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lux.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.lifevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pic.12306pc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifevc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxpmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pc.lux.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetree.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wshtgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upliveapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbern.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lynx.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifebuoy.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smallactions.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnum.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulcampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.pengpengla.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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